simplified policy check

as pointed out by @cdent, `usersign` already contains all the necessary
information